diff options
| author | Masashi Honma <masashi.honma@gmail.com> | 2026-05-30 02:09:46 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2026-06-03 15:07:06 +0300 |
| commit | 8b40b1d24a6099fe9fac8e207d4cb04ab5e0baae (patch) | |
| tree | 9942a9ac6f93e4facab1d1754a7ac6bb8fa2df95 /include/linux/timerqueue.h | |
| parent | 68511e16320b19387a8593c578a7ebe307c05166 (diff) | |
| download | linux-8b40b1d24a6099fe9fac8e207d4cb04ab5e0baae.tar.xz | |
wifi: mac80211: Fix overread in PREQ frame processing
When the AF flag is enabled, hwmp_preq_frame_process() overreads
target_addr by 2 bytes. Since this occurs within the socket buffer, it does
not read across memory boundaries and therefore poses no security risk;
however, we will fix it as a precaution.
In this fix, a new function mesh_path_parse_request_frame() is established
to separate the implementation of frame format validation and the check for
unsupported features. This is intended to facilitate future work when
implementing the currently unsupported parts.
Assisted-by: Claude:Sonnet 4.6
Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
Link: https://patch.msgid.link/20260529230952.124754-4-masashi.honma@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions
